Privacy

Last updated 7 October 2026

Skylab has no advertising, no analytics cookies and no third-party trackers. Here is everything it handles.

What the site stores

• Your account. When you request access we keep your name, work email and firm, and the role and intended use if you give them, to decide on the request and to run your subscription. An approved account also holds its plan and paid-until date.
• Signing in. Sign-in links and codes are emailed to you and stored only as one-way hashes. A signed-in device keeps a cookie (sk_session) so you stay signed in. We record when, and from which IP address and browser, each sign-in happens and when each device was last used, to keep the account secure and to hold each login to one person. Team members may use a shared password instead, which sets a cookie (ct_session).
• Server logs. Our hosting provider keeps standard request logs (IP address, browser type, the page or endpoint requested, time) for a limited period to run and secure the service.
• Push notifications. If you enable push in the bell panel, your browser's push endpoint and its encryption keys, plus the browser type, are stored so alerts can be delivered. "Disable" in the same panel deletes them; a subscription that stops accepting messages is removed automatically.
• Chat history. Chat has been retired. Conversations saved before then stay on our server, not linked to an identity, until you ask us to remove them. The summaries are computed in your browser and send nothing.
• On your device. Theme, tab and filter preferences, and an admin token if you are the operator, live in your browser's local storage and never leave it except as described for the admin token (sent with your own requests).
• Email. Your address receives sign-in links and messages about your subscription, and alerts only if an alert channel is configured for you. It is not used for anything else.

Third parties that process data

• Railway (hosting and database), Anthropic (the language model that translates Thai factory names and writes the Book's commentary), Resend (sign-in and account emails), and your browser vendor's push service (Apple, Google or Mozilla) for notifications.

Public data and company names

Every figure on the site comes from public statistics and public filings. Company and counterparty names appear as published by exchanges and regulators; the site does not hold personal data about individuals beyond the operational items above.

Your choices

Disable push in the bell panel to delete your push subscription. Account and sign-in records are kept while your account exists; to close it and have them deleted, to have chat history removed, or for any other request, write to [email protected].

Changes

This notice will be updated when the service changes; the date above says when.